Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/4df8f1-241d-4339-b0f6-d65ad430beb7/1/DSkZIlh_dQ94oZeVy9ibxymvF9U.mft
File: DSkZIlh_dQ94oZeVy9ibxymvF9U.mft (raw, json)
Hash identifier: 1OG7KQ1zHY37Oksz+RJE4/uz3R2isAPY+gSCuas50YA=
Subject key identifier: E0:37:E6:3E:C0:3E:C4:4E:E9:45:56:D3:D9:91:56:51:88:E9:93:C5
Authority key identifier: 0D:29:19:22:58:7F:75:0F:78:A1:97:95:CB:D8:9B:C7:29:AF:17:D5
Certificate issuer: /CN=0d291922587f750f78a19795cbd89bc729af17d5
Certificate serial: 019A4F62B8FBE6536D8CDD6AA413B6B93E71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DSkZIlh_dQ94oZeVy9ibxymvF9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/4df8f1-241d-4339-b0f6-d65ad430beb7/1/DSkZIlh_dQ94oZeVy9ibxymvF9U.mft
Manifest number: 1385
Signing time: Tue 04 Nov 2025 15:01:01 +0000
Manifest this update: Tue 04 Nov 2025 15:01:01 +0000
Manifest next update: Wed 05 Nov 2025 15:01:01 +0000
Files and hashes: 1: 1g3YzsLZ5QOCf6qi-eFi1LVqHQ8.roa (hash: +wFJ5tj+lSmxnwgEedsXBX4o8rthXQtXpU++hvEpCkM=)
2: DSkZIlh_dQ94oZeVy9ibxymvF9U.crl (hash: YddNFVPPwdTScveoDG1TANhtRvUWuPtSye/5D5A1z0E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/4df8f1-241d-4339-b0f6-d65ad430beb7/1/DSkZIlh_dQ94oZeVy9ibxymvF9U.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/4df8f1-241d-4339-b0f6-d65ad430beb7/1/DSkZIlh_dQ94oZeVy9ibxymvF9U.mft
rsync://rpki.ripe.net/repository/DEFAULT/DSkZIlh_dQ94oZeVy9ibxymvF9U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 15:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:b8:fb:e6:53:6d:8c:dd:6a:a4:13:b6:b9:3e:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d291922587f750f78a19795cbd89bc729af17d5
Validity
Not Before: Nov 4 15:01:01 2025 GMT
Not After : Nov 5 15:01:01 2025 GMT
Subject: CN=e037e63ec03ec44ee94556d3d991565188e993c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:20:55:a4:4b:88:4b:59:96:87:37:72:9d:9a:
ca:27:06:52:b2:63:ef:de:44:f4:5e:41:23:c1:0b:
22:32:d3:cc:d5:d3:48:8d:2b:ed:64:bb:0c:18:75:
35:11:68:af:21:20:8d:69:4c:f4:0e:ac:1e:f3:ee:
fb:5a:43:eb:47:a6:4f:64:42:92:fc:fa:17:7b:1a:
94:4d:21:2c:5e:40:79:9e:5a:9d:c4:66:27:43:c6:
7d:e7:b8:99:4e:60:14:2f:08:01:64:7b:bc:91:fe:
f4:ea:25:2f:82:93:12:3c:ea:8f:f8:7d:5d:86:ef:
20:96:b7:61:ad:0d:81:9f:b0:64:67:75:53:74:06:
f8:77:79:22:d4:fe:80:dc:64:13:02:c1:93:bb:42:
b7:98:f4:ed:77:df:b3:2b:94:31:79:91:6f:0f:a1:
58:36:4b:bc:3f:17:7a:bd:cf:fb:7f:33:db:30:58:
72:53:e6:ba:e6:f8:7c:77:f6:69:be:8a:52:14:a1:
5c:3d:01:24:de:65:f2:38:a7:12:63:6e:0b:60:b1:
95:f9:82:49:e0:30:94:1b:1a:8f:64:7b:eb:b1:ae:
5a:6a:42:7b:68:0c:e0:26:58:7b:76:54:60:4c:8b:
80:db:d3:08:8d:75:15:b6:d4:26:61:0d:d3:16:13:
74:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:37:E6:3E:C0:3E:C4:4E:E9:45:56:D3:D9:91:56:51:88:E9:93:C5
X509v3 Authority Key Identifier:
keyid:0D:29:19:22:58:7F:75:0F:78:A1:97:95:CB:D8:9B:C7:29:AF:17:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DSkZIlh_dQ94oZeVy9ibxymvF9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/4df8f1-241d-4339-b0f6-d65ad430beb7/1/DSkZIlh_dQ94oZeVy9ibxymvF9U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/4df8f1-241d-4339-b0f6-d65ad430beb7/1/DSkZIlh_dQ94oZeVy9ibxymvF9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:ba:5a:ac:fa:94:8d:90:63:23:5f:70:74:34:e0:8c:ed:e9:
7e:ad:d3:48:77:32:3b:ab:01:d6:9f:9b:a6:62:79:ee:80:4e:
88:1e:70:16:66:00:15:01:da:78:b0:7c:cf:99:b4:97:b2:55:
4e:bb:13:8d:54:14:cf:f6:71:4c:ab:f5:a9:2b:3f:fc:d8:b0:
83:5c:87:26:08:bb:e0:03:48:6b:53:db:b2:49:9a:f6:1d:1c:
a5:35:7d:68:5a:af:91:85:cd:54:a4:32:ad:67:0e:7b:a5:fc:
16:5e:da:f4:6e:ec:c5:a7:43:bc:df:05:b9:b2:b7:56:bf:56:
e3:ee:49:4c:11:2a:ef:2b:1e:41:d4:37:af:03:39:fa:80:60:
1f:0b:db:0e:53:eb:1d:49:26:85:00:50:73:70:65:9c:6e:6a:
ed:e2:0d:48:e0:b6:6b:5a:81:4b:d8:4f:fe:5a:d3:b4:9d:ed:
1b:58:d1:52:ac:dd:b7:21:f0:b0:93:e0:11:36:0e:21:c7:29:
4c:d2:25:15:78:2f:78:2c:1e:94:a0:2a:11:1f:1c:7d:6c:84:
a0:62:6a:b5:ce:5d:90:7a:82:4e:50:0c:ea:c4:c4:bf:58:d0:
4a:07:e9:27:e6:d8:cd:b1:91:4b:c3:aa:56:72:f6:b8:0b:69:
44:0c:6b:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:43:02 2025 by rpki-client